CVE-2017-1421

IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=swg22005234Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/102153Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040015Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/127411Issue Tracking, VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22005234Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/102153Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040015Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/127411Issue Tracking, VDB Entry, Vendor Advisory

Published

Dec 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14203Rejected reason: Unused CVE for 2017
• CVE-2017-14204Rejected reason: Unused CVE for 2017
• CVE-2017-14205Rejected reason: Unused CVE for 2017
• CVE-2017-14206Rejected reason: Unused CVE for 2017
• CVE-2017-14207Rejected reason: Unused CVE for 2017
• CVE-2017-14208Rejected reason: Unused CVE for 2017
• CVE-2017-14219XSS (persistent) on the Intelbras Wireless N 150Mbps router …
• CVE-2017-1422IBM MaaS360 DTM all versions up to 3.81 does not perform pro…
• CVE-2017-14222In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() d…
• CVE-2017-14223In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_buil…
• CVE-2017-14224A heap-based buffer overflow in WritePCXImage in coders/pcx.…
• CVE-2017-14225The av_color_primaries_name function in libavutil/pixdesc.c …